`tmp`

Ecosystem:
npm

Package URL:
pkg:npm/tmp

Total PRs:
34,717 Dependabot PRs

Latest PR:
6 days ago

Unique Repositories:
33,719 repositories

Unique Repos (30 days):
16 repositories

Security Advisories

tmp: Type-confusion bypass of _assertPath allows path traversal via non-string prefix/postfix/template

GHSA-7c78-jf6q-g5cm CVE-2026-49982 HIGH published about 1 month ago • updated about 14 hours ago

### Summary The `_assertPath` guard added to `tmp@0.2.6` rejects only string values that contain the substring `..`. It is bypassed when `prefix`,...

tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape

GHSA-ph9p-34f9-6g65 CVE-2026-44705 HIGH published about 2 months ago • updated 14 days ago

### Summary The tmp npm package contains a path traversal vulnerability that allows escaping the intended temporary directory when untrusted data ...

tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

GHSA-52f5-9888-hmc6 CVE-2025-54798 LOW published 12 months ago • updated 14 days ago

### Summary `tmp@0.2.3` is vulnerable to an Arbitrary temporary file / directory write via symbolic link `dir` parameter. ### Details According...

Recent PRs (filtered by: Open , Patch PRs )

RSS Feed Clear filter

Bump the npm_and_yarn group across 1 directory with 4 updates

Dev-moe-kyawaung/sphinx #14

0.2.5 → 0.2.7 Patch PR

Open 9 days ago 3 comments

Bump the npm_and_yarn group across 1 directory with 12 updates

soapy-dns/retirement-calc #149

0.2.5 → 0.2.7 Patch PR

Open 21 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 22 updates

CaffeeLake/poml #2

0.2.3 → 0.2.7 Patch PR

Open 22 days ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 9 updates

thec1rclehost123-cmd/thec1rcle #68

0.2.5 → 0.2.7 Patch PR

Open 25 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 7 directories with 13 updates

lannathompson65-arch/toolkit #3

0.2.5 → 0.2.7 Patch PR

Open 30 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 7 updates

Connect-Me-Tutoring/connect-me-tutor-portal #666

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 6 directories with 7 updates

Dct555/core-js #6

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 2 directories with 16 updates

tabrezahmed51/Cloudflare-agents_0118 #10

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 5 directories with 8 updates

hashim2266/mcp.ken #1

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

Chore(deps): Bump the npm_and_yarn group across 7 directories with 12 updates

whitphx/stlite #2063

0.2.4 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

build(deps): bump the npm_and_yarn group across 33 directories with 12 updates

hashim21223445/angular #331

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 3 comments

Chore(deps): Bump the npm_and_yarn group across 8 directories with 12 updates

whitphx/stlite #2062

0.2.4 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump tmp from 0.2.6 to 0.2.7

Dustin4444/lodestar #92

0.2.6 → 0.2.7 Patch PR

Open about 1 month ago 5 comments

chore(deps): bump the gutenberg-security group across 1 directory with 12 updates

brainstormforce/sureforms-public #105

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 9 directories with 23 updates

EmilynnJ/dyad #6

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 25 updates

HarleyCoops/gemini-cli #15

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 12 directories with 20 updates

Dev-moe-kyawaung/firebase-tools #8

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 26 updates

EmilynnJ/qwen-code #9

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 4 comments

Bump the npm_and_yarn group across 1 directory with 15 updates

HarleyCoops/chroma #13

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

deps(extension): Bump the npm_and_yarn group across 1 directory with 3 updates

JoshSmithXRM/Power-Platform-Developer-Suite #1248

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 8 updates

sc-sobiyasivakumar/xmcloud-starter-js #279

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 1 comment

Chore(deps): Bump the npm_and_yarn group across 7 directories with 12 updates

whitphx/stlite #2059

0.2.4 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 2 directories with 21 updates

tabrezahmed51/Cloudflare-agents_0118 #3

0.2.5 → 0.2.7 Patch PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 2 directories with 14 updates

OneFineStarstuff/openvsx #8

0.2.4 → 0.2.6 Patch PR

Open about 2 months ago 8 comments

chore(deps): bump tmp from 0.2.1 to 0.2.7

hector1-cloud/sol2uml #10

0.2.1 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 16 updates

csound/web-ide #493

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 27 directories with 11 updates

Kbro1989/cloudflare-code-agent #90

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 15 directories with 10 updates

mitanshu-bhasin/explyra #73

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 6 comments

build(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /blade-ai/tui

chaosblade-io/chaosblade #1291

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 7 updates

Connect-Me-Tutoring/connect-me-tutor-portal #633

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the minor-patch-updates group across 1 directory with 3 updates

kapilduraphe/mcp-watch #52

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 3 updates

HarleyCoops/gemini-cursor #4

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 21 updates

EmilynnJ/twilio-video-app-react #1

0.2.1 → 0.2.7 Patch PR

Open about 2 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 19 updates

EmilynnJ/twilio-video.js #1

0.2.3 → 0.2.7 Patch PR

Open about 2 months ago 4 comments

Bump the npm_and_yarn group across 2 directories with 7 updates

EmilynnJ/rewrite #1

0.2.3 → 0.2.7 Patch PR

Open about 2 months ago 4 comments

chore(deps): bump tmp from 0.2.4 to 0.2.6

bitfocus/companion #4201

0.2.4 → 0.2.6 Patch PR

Open about 2 months ago 2 comments

build(deps): bump the npm_and_yarn group across 3 directories with 11 updates

sentry-demos/empower #1500

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 11 directories with 10 updates

loveyou001/firebase-framework-tools #80

0.2.3 → 0.2.7 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 15 directories with 10 updates

loveyou001/genkit #71

0.2.3 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

build(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /node

valkey-io/valkey-glide #6069

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

Bump the development-version-updates group across 1 directory with 72 updates

mrlonis/todo-ui #418

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

Bump tmp from 0.2.4 to 0.2.6

Kilo-Org/kilocode-legacy #157

0.2.4 → 0.2.6 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /src/frontend in the npm_and_yarn group across 1 directory

Kielek/opentelemetry-demo #326

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

build(deps): bump tmp from 0.2.3 to 0.2.7

zachglindro/cereals-inventory #38

0.2.3 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump tmp from 0.2.5 to 0.2.7 in the npm_and_yarn group across 1 directory

Iktahana/illusions #1513

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 3 comments

chore(deps): bump tmp from 0.2.5 to 0.2.7

maxcraftbase/gatesign #42

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump tmp from 0.2.5 to 0.2.7

sgeraldes/waveterm #98

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump tmp from 0.2.5 to 0.2.7 in the npm_and_yarn group across 1 directory

m-idriss/3dime-angular #197

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 2 comments

chore(deps-dev): bump tmp from 0.2.5 to 0.2.7

gratisCobalt/sculpt #39

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

chore(deps-dev): bump tmp from 0.2.5 to 0.2.7

serhalp/delete-me-test-hydrogen #10

0.2.5 → 0.2.7 Patch PR

Open about 2 months ago 1 comment

Package Details

Name:	`tmp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/tmp`
JSON API:	View JSON

Security Advisories

3

Active advisories

HIGH 2

LOW 1

View All npm Advisories

Package Information

Description:

Temporary file and directory creator

Repository:	https://github.com/raszi/node-tmp
Homepage:	http://github.com/raszi/node-tmp
Latest Release:	`0.2.3` over 2 years ago
Dependent Repos:	992,625
Dependent Packages:	7,547
Downloads:	226,024,983
Ranking:	Top 0.0343% by dependent repos Top 0.0073% by downloads Top 0.0126% by dependent pkgs

PR Status

Open 31,222 (89.9%)

Merged 1,952 (5.6%)

Closed 1,539 (4.4%)

PR Types

Minor 964 (2.8%)

Patch 6,861 (19.8%)

Removal 26,538 (76.4%)